Security improvement of using modified coherent state for quantum cryptography 
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Weak coherent states as a photon source for quantum cryptography have hmit in secure data rate 
and transmission distance because of the presence of multi-photon events and loss in transmission 
line. Two-photon events in a coherent state can be taken out by a two-photon interference scheme. 
We investigate the security issue of utilizing this modified coherent state in quantum cryptography. 
A 4 dB improvement in secure data rate or a nearly two-fold increase in transmission distance over 
the coherent state are found. With a recently proposed and improved encoding strategy, further 
improvement is possible. 
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I. INTRODUCTION 

The ultimate security of quantum cryptography stems 
from the non-cloning theoremP] of quantum mechanics, 
which is applied to a single quantum system. In other 
words, quantum information can only be shared between 
two parties, the one (Alice) who creates it and the one 
(Bob) who receives it. Therefore, in the implementa- 
tion in optical communication, the ideal source is a sin- 
gle photon source with information carried by individual 
photons. So far a weak coherent state from a laser is 
closest to a single photon source for quantum cryptog- 
raphy. The experimental realization'3| of the first pro- 
posed quantum cryptography protocol, known as BB84 
protocalQ, involved a heavily attenuated thermal source 
(which is worse than a laser in the aspect of multi-photon 
events) . However, the existence of multiple photon events 
for a weak coherent state, even though very rare, poses se- 
rious problem for the security of the protocol. An eaves- 
dropper (Eve) can in principle use the so-called photon 
number splitting attack to tap the information without 
being noticed. Recent analysis by LiitkenhausQ on the 
security of quantum cryptography by a weak coherent 
state puts limit on the data rate and transmission dis- 
tance for secure key distribution. 

Significant progress has been made in producing single 
photon statesll 11, H i, i, ES [H El (ll . But so far 

these sources are fluorescence-based and have small ef- 
ficiency. Furthermore, because the emission depends on 
energy structure, it has a fixed wavelength and a finite 
time response for high repetition rate. So they arc lim- 
ited for practical applications. Recently a new scheme 
was proDOsed|l4j and realized [Tsj for producing a pho- 
ton source with same single photon rate as a coherent 
state but less two-photon events. The scheme relies on 



*eurrently with Photonics hidustries International, Bohemia, NY 
tAlso with Carmel High School, Carmel, IN 
t Electronic address: |zou@iupui.edu| 



a two-photon quantum interference phenomenon to re- 
duce and eventually cancel the two-photon events from 
a coherent state. Although it cannot take out all the 
multi-photon events, it does take out the most dominat- 
ing multi-photon events - two-photon events. This mod- 
ified coherent state (MCS) has the advantages of high 
data rate, well defined direction and wave-length inde- 
pendence for practical application in quantum cryptog- 
raphy. 



A new quantum cryptography protocol(SARG04) was 
recently proposed|l6| against the photon number split- 
ting attack for weak coherent state. Such a scheme 
relies on a smarter encoding scheme that is based on 
nonorthogonal states and requires at least two or more 
photons for Eve to recover the data. Thus Eve needs at 
least three photons to use the photon number splitting 
attack. If we use this protocol on the modified coherent 
state, we will make a three-photon interference effect to 
cancel the three-photon term so that Eve can only rely on 
the 4-photon or higher order terms to apply the photon 
number splitting attack. So the modified coherent state 
still has advantage over a weak coherent state in this new 
protocol. 



Because of the existence of the multi-photon terms, the 
modified coherent state has similar security problems as 
the coherent state. But the influence of those higher 
order terms will be smaller. The security problem of the 
coherent state was investigated by Liitkenhaus Q and 
Brassard et alE3|- In the following, we will apply the 
same line of argument of Ref . Q to look for the optimum 
secure data rate and transmission distance for a given 
transmission loss and dark counts of the detectors for the 
modified coherent state in both BB84 protocol in Ref.Q 
and the new SARG04 protocol in Ref.[Ta|. To do that, we 
need to find the probability P„i for multi-photon event 
and the probability Ps to detect any photon in such a 
state. We will start in the following with the description 
of the modified coherent state. 
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II. GENERATION OF THE MODIFIED 
COHERENT STATE (MCS) 

The modified coherent state is just a coherent state 
without the two-photon or three-photon terms. It can 
be generated by mixing a coherent state with a two- 
photon state from parametric down-conversion. There 
are two types of mixing. The first one is to inject the co- 
herent state into an optical parametric amphfier with a 
smah gain. This is the scheme first proposed by Stoler to 
produce fight source with sub-Poisonian statistics. The 
second one mixes the two fields with a beamsplitter. In 
practice the first method is more direct and simpler to 
implement. In the following calculation, the results are 
more or less same. Wc will consider only the first method. 

For simplicity of argument, we will only treat single 
mode case here. In reality, this corresponds to, for ex- 
ample, a single temporal mode of pulses of light. We will 
concentrate on the probabilities of detecting photons in 
each pulse. The data rate discussed below will be the 
probability per pulse. In CW case, we will consider the 
average photon number (= |ap for coherent state, see be- 
low) rather than the intensity as our parameter. So the 
detection time does not appear as a separate parameter 
but is included in the average photon number. However, 
we do require the detection time be much smaller than 
the coherence time of the field to ensure the single mode 
approximation. 

In an optical parametric amplifier, the interaction 
Hamiltonian is given by 



(1) 



where ^ is proportional to the amplitude of the pump field 
and the nonlinear conversion coefficient of the nonlinear 
medium. 

With the injection of a coherent state, the initial state 
is simply a coherent state la) and the output state be- 
comes 
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C is proportional to As a matter of fact, the above state 
is simply the two-photon coherent state or the squeezed 
coherent state first discussed by Yuen[l8l|. In order to 
find the probability of photon number, we expand the 
above state in the photon number state base and obtain 
from Ref.[ll[l| 
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with 
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where _ff„ is the nth-order Hcrmite polynomial and 

/i = cosh(ICI), = ^ sinh(ICI), or = 1 + 
More specifically to our interest, we list 
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From the above, we easily find the probability for 
multi-photon event as 



-P,n = 1- |Co|' - 

This quantity is minimized when 
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with a minimum value of 



P„ = l--(1 
/i 



(6) 
(7) 

(8) 



Notice that the two-photon probability P2 = IC2P is zero 
under this condition. This results from a two-photon 
interference effect between the coherent state and the 
spontaneous parametric down-conversion, i.e., interfer- 
ence between the two- photon amplitude [ivj^pi of para- 
metric down-conversion and the two-photon amplitude 
0^/^/2 of a coherent state. 

For SARG04 protocol, we need to minimize the prob- 
ability for events of three or more photons. This proba- 
bility is given by 



i^; = i-|Cop-|Cip-|C2| 

which is minimized when 
with a minimum value of 



P' 



1 



(9) 



(10) 



(11) 



Similar to the two-photon case, when condition in 
Eq.(lO) is satisfied, three-photon probability P3 = IC3P 
is zero as a result of three-photon interference. It is not 
easy to understand how a three-photon effect can arise 
from parametric down-conversion with only even number 
of photons. What happens is that a two-photon event 
from parametric down conversion combines with a single 
photon event in coherent state to form a three-photon 
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event with an amplitude of \f^j2[iva. This ampHtude 
interferes with another three-photon event directly from 
the coherent state with an amplitude of c? I\f^. Com- 
plete cancellation occurs when the two amplitudes are 
equal leading to Eq.(lO). 

To evaluate the photon detection probability P^, we 
notice that in practice, photodctcction usually has non- 
unit efficiency. This will reduce the signal level. We need 
to calculate the photon detection probability under this 
non-ideal condition. The non-unit efficiency is modelled 
as a beamsplitter of transmissivity r]. We may start with 
the photon number probability for single mode case as 



Pr. = 



■ exp(— a'^a'"! 



where :: denotes normal ordering and d' = ^/T\d -|- 
\/\ — rydo with do in the vacuum. More specifically for 
the case of no photon: 

Po - (: cxp(-d'td') :). 

Then a simple calculation leads to 

Po = (:cxp(-77dta) (12) 

where the average is over the state in Eq.(2). Then the 
photon detection probability is simply 



P. = 1 - Po- 
From the appendix, we have 

cxp 



Pn 



(13) 



(14) 



with x + iy = ae-'f/"^ {e"^ = 

With the condition in Eq.(7) for minimum multi- 
photon events, we have the signal probability 



P, = 1 



exp 



or 



p: = i- 



exp 



3v^iW\{fl-W\)/{pi + W\{l~v)) 



,(15) 



(16) 



for condition in Eq.(lO). 



III. OPTIMUM SECURE TRANSMISSION 
RATE 

Next we evaluate the secure transmission rate based 
on the formulism from Ref.0|. The communication rate 
per slot (pulse) for a certain error rate e is given by 



p(l-r(e))+/(e)/i(e) 



(17) 
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FIG. 1: Communication rate as a function of (a) |ap for BB84 
with coherent state, (b) u for BB84 with modified coherent 
state, and (c) i/ for SARG04 with modified coherent state. 
The overall efficiency is 77 = - 9.45 dB, which corresponds to 
a transmission distance of 5 km in KTH15. 



In the above equation, the parameter p is given by 

Ps Pm 



P ■ 



P. 



(18) 



which is the probability of detection events originating 
from the desirable photon events. The compression func- 
tion T(e) is given by 



T-{e) = log2 



l + 4--4(-)^ 
P P 



(19) 



The function h{e) is the Shannon entropy function given 
by 



h{e) = -elog2e- (1 - e)log2(l - e). 



(20) 



The function /(e) characterizes the performance of the 
error correction algorithm. 

In order to simulate the communication rate, we need 
the values of P^, P^, e, and /(e). For BB84 protocol 
with the modified coherent state, Pm and Ps are given 
in Eqs.(7) and (15), respectively. However, due to the 
existence of dark count of any photodetectors, Bob's de- 
tection events can be contributed from a signal that orig- 
inates from Alice's transmission, and a dark count that 
originates from Bob's photodetectors. Therefore, after 
taking into account the dark counts of the detectors, the 
signal probability Pg has to be modified as 



P, 



Ps=Ps+Pd- PsPd 



(21) 



where P^ is the dark count distribution and is simply 
equal to the dark counts per slot. Similarly, the error 
rate is also resulted from the signal and the dark count, 
and can be modelled by 



cP, + Prf/2 
P, ' 



(22) 



where c is a constant and characterizes a baseline signal 
error rate. Typical system should have a value of c less 
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than 2%. The total detection cfRciency 77 can be sep- 
arated into the channel transmission and the quantum 
efficiency of Bob's photodetectors. For fiber communica- 
tions, the transmission in the quantum channel is given 

by 



(23) 



where a is the loss coefficient of the fiber channel mea- 
sured in dB/km, / is the length of the fiber, and L is the 
loss in the receiver Bob's detection. 

We evaluate the communication rate as a function of 
the free parameters i^{fj. = y/l + v^) for MCS in BB84 
and SARG04 or \a\^ for coherent state, using parameters 
taken from the case KTH15 in Ref.Q. The dark counts 
per slot is Pd = 2 X 10^"'. The baseline signal error 
rate is set to be c = 0.01. The loss coefficient a of the 
fiber channel is 0.2 dB/km, and the receiver loss is 1 dB. 
The quantum efficiency of the photodetectors is rjd = 
0.18. The total detection efficiency is then 77 = rjcXid- 
For MCS in BB84, P„ and Ps are given in Eqs.(8) and 
(15) while for SARG04 protocol with MCS, Pm and 
are from Eqs.(ll) and (16), respectively. Fig.l shows the 



communication rates as a function of I 



at Z = 5 km for 



the BB84 protocol with coherent state or as a function of 
V for the modified coherent state in BB84 protocol and 
the SARG04 protocol. As can be seen, there is a clear 
maximum on the communication rate curve as a function 
of the adjustable parameter v or |ap. 

Next we concentrate on the optimal rate as we vary the 
transmission distance I, then obtain the resulting curves 
as shown in Fig. 2. The overall efficiency 77 is plotted 
in the top axis of Fig. 2 for reference. The curve (a) is 
a simple repeat of Ref.Q for a weak coherent state in 
BB84. Curves (b) for MCS in BB84 and (c) for MCS in 
SARG04 have significant improvement over (a). At zero 
transmission distance, we find a 4 dB increase in secure 
data rate from modified coherent state over the coherent 
state in the BB84. A further 6 dB increase in secure data 
rate is resuhed from MCS with SARG04 protocol. Note 
that each curve features a cutoff transmission distance. 
Modified coherent state has nearly two-fold increase in 
transmission distance over the coherent state in BB84. A 
further nearly two-fold increase in transmission distance 
is found with SARG04. 
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APPENDIX A: CALCULATION OF EQ.(14) 

The average in Eq.(12) is over the state in Eq.(4). To 
do this we first convert Eq.(12) in the normal ordering 

Overall Efficiency 77 (dB) 




20 40 60 

Distance (km) 



FIG. 2: Optimum rate as a function of transmission distance 
for: (a) BB84 with coherent state; (b) BB84 with modified 
coherent state; (c) SARG04 with modified coherent state. 



form into one without normal ordering from Ref . |20|| : 

Po = (: exp(-77ata) :) = (cxp[-ln(l -ri)a)a)]). (Al) 

Next we convert Eq.(Al) into anti-normal ordering form 
from Ref.[20l| again: 



Po 



-ln(l-,,)/ 



e ■'V^{cxp[(l-e-'"^^-"0/3*/3]}) 



1 



(a|Z^tyl{exp[ 



1 — 77 ' ' ' ' 1 ^ ^ 

Then we insert the closure relation: 

- / d2/3|/3)(/3| = 1 



f3*f3]}U\a). (A2) 



(A3) 



between S" and 6t™ in yi(/3™/?") = S"6t™ in Eq.(A2) 
and we have 



1 



1 



Po = - / d'p- cxp(- 

TT J 1 - 77 

From Ref.[ll[l3 we find 



mU\o^)\\ (A4) 



1 

— exp 



v*a'^ - 7^/3*2 -I- 2(3*a 



2fi 



Substituting the above expression in Eq.(A4) and with 
some lengthy manipulation, we arrive at the expression 
in Eq.(14). 
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